HPICF-SAVI-MIB

All MIBs › HPICF-SAVI-MIB

Organization: HP Networking

Last Updated: 2017-11-08

Category: Domain: Security, Technology: IPv6, Vendor: HP/HPE

Description: HP ICF SNMP MIB for Source Address Validation Improvement (SAVI) binding IPv6 addresses to access ports on HP ProCurve switches.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HPICF-SAVI-MIB?

HPICF-SAVI-MIB is an HP proprietary MIB, based on an IETF draft for Source Address Validation Improvement (SAVI), used to configure and monitor DHCPv6 Snooping on HP ProCurve switches, binding validated IPv6 addresses to specific access ports. It exposes configuration and state objects tracking which IPv6 addresses have been learned via DHCPv6 snooping and bound to which port, helping prevent IPv6 address spoofing. Its monitoring value is primarily a security/software-feature status check: verifying that address bindings are correctly established and that SAVI/DHCPv6 snooping is actively protecting the network, rather than reporting hardware health metrics. It explicitly derives from and depends on the IETF draft-an-savi-mib specification for its object model. It is typically deployed in IPv6-enabled enterprise or campus networks using HP ProCurve switches where source address validation is required to prevent address-spoofing attacks, and administrators often load the HPICF-SAVI-MIB MIB Browser file to inspect the address binding tables directly.

IPNetwork Monitor allows you to monitor SNMP objects defined in HPICF-SAVI-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

HP ProCurve switch

Monitoring Examples

No sample_objects were provided, but consistent with SAVI/DHCPv6 snooping this MIB would include a binding table mapping learned IPv6 addresses to access ports. An administrator would poll this table to confirm expected client IPv6 addresses are bound to the correct ports, and an unexpected or missing binding would reveal a spoofing attempt or a DHCPv6 snooping failure.

What Can Be Monitored

DHCPv6 snooping/SAVI binding entries
IPv6 address-to-port bindings

Imported Objects

From HP-ICF-OID

hpSwitchExperimental

OBJECT-IDENTITY

From IF-MIB

InterfaceIndex

From INET-ADDRESS-MIB

InetAddress
InetAddressType
InetVersion

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

MacAddress
RowStatus
TimeInterval

OIDs

OID symbolic	OID numeric	Type	Access	Description
hpicfSaviMIB	1.3.6.1.4.1.11.2.14.11.5.2.1			This MIB Module is designed to support the configuration and monitoring of DHCPv6 Snooping protocol. This MIB module was based off the IETF draft of SAVI mib, which was designed to support configuration and monitoring of SAVI protocol by Changging An(acq@cernet.edu.cn) and Jiahai Yang(yang@cernet.edu.cu), https://tools.ietf.org/html/draft-an-savi-mib-02.\u201d.
hpicfSaviObjects	1.3.6.1.4.1.11.2.14.11.5.2.1.1
hpicfSaviObjectsPortTable	1.3.6.1.4.1.11.2.14.11.5.2.1.1.1		not-accessible	The table containing hpicfSAVI parameters of each anchor.
hpicfSaviObjectsPortEntry	1.3.6.1.4.1.11.2.14.11.5.2.1.1.1.1		not-accessible	An entry containing hpicfSAVI running parameters of an anchor.
INE hpicfSaviObjectsPortIPVersion	1.3.6.1.4.1.11.2.14.11.5.2.1.1.1.1.1	InetVersion	not-accessible	The IP version.
NUM hpicfSaviObjectsPortIfIndex	1.3.6.1.4.1.11.2.14.11.5.2.1.1.1.1.2	InterfaceIndex	not-accessible	The index value that uniquely identifies the interface to which this entry is applicable. The interface identified by a particular value of this index is the same interface as identified by the same value of the IF-MIB's ifIndex.
INT hpicfSaviObjPortDhcpTrustAttr	1.3.6.1.4.1.11.2.14.11.5.2.1.1.1.1.3	INTEGER	read-write	The DHCP trust attribute of the port. enable(1), the attribute is set. disable(2), the attribute is not set.
U32 hpicfSaviObjectsPortFilteringNum	1.3.6.1.4.1.11.2.14.11.5.2.1.1.1.1.4	Unsigned32	read-write	The max filtering number of the Port.
hpicfSaviObjectsBindingTable	1.3.6.1.4.1.11.2.14.11.5.2.1.1.2		not-accessible	The table containing the state of binding between source address and anchor.
hpicfSaviObjectsBindingEntry	1.3.6.1.4.1.11.2.14.11.5.2.1.1.2.1		not-accessible	An entry containing the state of binding between source address and anchor. Entries are keyed on the source IP address type, binding type, anchor, and source IP address.
IPt hpicfSaviObjBindingIpAddrType	1.3.6.1.4.1.11.2.14.11.5.2.1.1.2.1.1	InetAddressType	not-accessible	IP address type of the binding source IP.
INT hpicfSaviObjectsBindingType	1.3.6.1.4.1.11.2.14.11.5.2.1.1.2.1.2	INTEGER	not-accessible	IP address assignment methods.
NUM hpicfSaviObjectsBindingIfIndex	1.3.6.1.4.1.11.2.14.11.5.2.1.1.2.1.3	InterfaceIndex	not-accessible	The index value that uniquely identifies the interface to which this entry is applicable. The interface identified by a particular value of this index is the same interface as identified by the same value of the IF-MIB's ifIndex.
IP hpicfSaviObjectsBindingIpAddress	1.3.6.1.4.1.11.2.14.11.5.2.1.1.2.1.4	InetAddress	not-accessible	The binding source IP address.
MAC hpicfSaviObjectsBindingMacAddr	1.3.6.1.4.1.11.2.14.11.5.2.1.1.2.1.5	MacAddress	read-create	The binding source mac address.
NUM hpicfSaviObjectsBindingLifetime	1.3.6.1.4.1.11.2.14.11.5.2.1.1.2.1.6	TimeInterval	read-only	The remaining lifetime of the entry. TimeInterval is defined in RFC 2579, it's a period of time, measured in units of 0.01 seconds, and the value is (0..2147483647). If hpicfSaviObjectsBindingType=manual, a value of 2147483647 represents infinity.
ROW hpicfSaviObjectsBindingRowStatus	1.3.6.1.4.1.11.2.14.11.5.2.1.1.2.1.7	RowStatus	read-create	The status of this row, by which new entries may be created, or old entries deleted from this table. An Entry can be created or deleted only when hpicfSaviObjectsBindingType=manual. Row statuses createAndWait(5), notReady(3) and notInService(2) are not supported.
hpicfSaviObjectsFilteringTable	1.3.6.1.4.1.11.2.14.11.5.2.1.1.3		not-accessible	The table containing the filtering entries.
hpicfSaviObjectsFilteringEntry	1.3.6.1.4.1.11.2.14.11.5.2.1.1.3.1		not-accessible	An entry containing the filtering parameters. Entries are keyed on the source IP address type, anchor, and source IP address.
IPt hpicfSaviObjFilteringIpAddrType	1.3.6.1.4.1.11.2.14.11.5.2.1.1.3.1.1	InetAddressType	not-accessible	IP address type of the filtering source IP.
NUM hpicfSaviObjectsFilteringIfIndex	1.3.6.1.4.1.11.2.14.11.5.2.1.1.3.1.2	InterfaceIndex	not-accessible	The index value that uniquely identifies the interface to which this entry is applicable. The interface identified by a particular value of this index is the same interface as identified by the same value of the IF-MIB's ifIndex.
IP hpicfSaviObjFilteringIpAddr	1.3.6.1.4.1.11.2.14.11.5.2.1.1.3.1.3	InetAddress	not-accessible	The filtering source IP address.
MAC hpicfSaviObjectsFilteringMacAddr	1.3.6.1.4.1.11.2.14.11.5.2.1.1.3.1.4	MacAddress	read-only	The filtering source mac address.
hpicfSaviConformance	1.3.6.1.4.1.11.2.14.11.5.2.1.2
hpicfSaviCompliances	1.3.6.1.4.1.11.2.14.11.5.2.1.2.1
hpicfSaviCompliance	1.3.6.1.4.1.11.2.14.11.5.2.1.2.1.1			The compliance statement for entities which implement hpicfSAVI protocol.
hpicfSaviGroups	1.3.6.1.4.1.11.2.14.11.5.2.1.2.2
hpicfSaviportGroup	1.3.6.1.4.1.11.2.14.11.5.2.1.2.2.1			The if group contains objects corresponding to the hpicfSavi running parameters of each anchor.
hpicfSavibindingGroup	1.3.6.1.4.1.11.2.14.11.5.2.1.2.2.2			The binding group contains the binding information of anchor and source ip address.
hpicfSavifilteringGroup	1.3.6.1.4.1.11.2.14.11.5.2.1.2.2.3			The filtering group contains the filtering information of anchor and source ip address.

RFC description

Manages DHCPv6 Snooping and SAVI (Source Address Validation Improvement) protocol configuration and monitoring on HP switches.

Start monitoring HP ProCurve switch (SAVI/DHCPv6 snooping address binding) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HPICF-SAVI-MIB

What Is HPICF-SAVI-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description